Privacy Policy
Effective 7 October 2026 · Plotcaster is operated by Click Clack Labs LLC, 418 Broadway, Ste R, Albany, NY 12207 ("we", "us").
The short version
Plotcaster works on your photos inside your browser. Your photos, and the drawings and files you make, are never uploaded to us or to anyone else. There are no accounts and no adverts, and we don't sell data. The only cookies come from Google Analytics, which counts visits to the pages outside the editor. In the European Economic Area, the UK and Switzerland it stays off unless you say yes, and anyone can switch it off with Cookie settings at the foot of the page.
Some features use outside services: fonts, place search, map data, the background map and elevation. We also count page views. Each of these receives your IP address and what it needs to do its job, as listed below. None of them ever receives your photos.
Photos and files
A photo you open, paste or drop is decoded and drawn by code running on your device. Neither the photo nor the files you export are sent to us or to anyone else. Share hands the file to your device's share sheet, so it goes only where you send it.
If you paste a link to an image, your browser downloads the image straight from the site it's on, and that site sees the request as it would any visit.
The sample photos, the Draw style's drawing model and the engine that runs it are downloaded from this site, then run on your device. Draw asks before its first download.
What is stored on your device
Plotcaster keeps your drawings in this browser's storage (IndexedDB) so you can come back to them: their settings, a small picture of each, the photos you added and the map data for places you drew. It asks the browser not to clear this storage on its own, and when storage is full it makes room by dropping old map data.
It also remembers whether you agreed to download the drawing model, which drawing you had open last and the machine settings you enter for G-code (localStorage), and, until you close the tab, your last export options and which version of each drawing that tab saved (sessionStorage).
The pages outside the editor remember your answer about Google Analytics (localStorage) and, until you close the tab, the country code used to decide whether to ask (sessionStorage). The shadow box maker keeps a scene you have changed (localStorage), so that a reload does not lose it; its “Start again” button removes it.
None of this is sent anywhere. In Your drawings, removing a drawing deletes it after 10 seconds, so you can undo, along with its photo and map data unless another drawing uses them; if you close the tab sooner, it's deleted the next time you open the editor. Remove all drawings deletes every saved drawing and its photo and map data at once. You can also clear this site's data in your browser's settings.
Settings in the link
As you work, the editor writes your settings into the page address, after the # sign. Browsers don't send that part of an address to servers, and none of the page-count tools below receives it: two of them cut it off, and Google Analytics is not loaded in the editor at all. If you bookmark, copy or share the link, it carries those settings: for a map, the place and region names, the area's centre coordinates and size, and any title you typed; for your own photo, its file name. It never contains the photo.
The shadow box scene maker works the same way, with one difference: it writes nothing into the page address while you work. Copy link makes a link that holds the layout of your scene and the names you gave its sheets, after the # sign, and it goes only where you send it.
Searching this site
The search box looks through a list of names that your browser downloads from this site. What you type is matched against that list on your device and is not sent to us. When the search box at the top of a page takes you to the search page, your words travel after the # sign, and the search page takes them out of the address as it opens. The one place they are recorded is Google Analytics, where it runs: see Page counts below.
Hosting
The site is hosted by Vercel, and requests to it pass through Cloudflare. Both receive every request your browser makes to this site, such as pages, sample photos and the drawing model, with your IP address, browser details and the address requested (without the part after #). The request logs Vercel lets us see are kept for no more than 30 days, depending on our hosting plan, and we don't copy them anywhere else. Vercel and Cloudflare may keep their own records for longer, for security and operations, under their own policies.
Cloudflare also asks browsers that support it to report failed connections to this site (Network Error Logging). A report goes to Cloudflare with details such as the address requested, the kind of error and timings.
Page counts
We count page views with three tools. None of them ever sees your photos, your drawings or the places you draw. The first two use no cookies. The third, Google Analytics, does, and it is the only one that needs your agreement.
- Vercel Web Analytics is part of our hosting and reports through this site's own address. For each page view it records the time, the page's address without the part after #, the site that linked to it, your approximate location (country, region and city), and your browser, operating system and device type. Instead of cookies, it recognises a visit by a hash made from the request, which is discarded after 24 hours. We see only totals.
- Cloudflare Web Analytics is added by Cloudflare, with a script from static.cloudflareinsights.com that reports through this site's own address. It sends how the page loaded: the page's address and the site that linked to it, both without the query or the part after #, your browser and operating system versions, loading times, memory use, a random ID for that page load, and speed scores with the page element each one concerns (such as the address of the largest image, or a CSS selector for what you tapped or typed into). Cloudflare says it uses no cookies or local storage and doesn't fingerprint visitors.
- Google Analytics (Google Ireland Limited in Europe, Google LLC elsewhere) runs on every page except the editor, with a script from www.googletagmanager.com that reports to Google's servers. It sets two cookies on this site's address,
_gaand_ga_GMH06HC1TX, which hold a random number that tells one browser from another and last up to two years. For each visit Google receives your IP address, from which it works out an approximate location without storing the address, the pages you open (their addresses without the part after #), the site that linked to you, your browser, device, screen size and language, and what you do on a page: scrolling, links to other sites, the files you download, the words you search this site for and how many results they found, the parts and sizes you choose in the shadow box scene maker, and which file tool you use and the kind of file it saves (never the file you give a tool, its name or anything in it). We have switched off Google signals and advertising features, so this is not joined to a Google account or used for adverts. Google keeps the records for the period set in our account, which is at most 14 months, and may process them in the United States.
Your choice about Google Analytics
If you are in the European Economic Area, the UK or Switzerland, Google Analytics is not loaded and sets no cookies until you answer yes to the question at the bottom of the page. Saying no is one click and nothing changes on the site. To know whether to ask, the page reads your country from Cloudflare, through this site's own address, and looks at your device's time zone; if either says Europe, you are asked.
Elsewhere it loads with the page. Wherever you are, Cookie settings at the foot of every page lets you change your answer at any time; choosing no stops it and deletes its cookies. If your browser sends the Global Privacy Control signal, we treat that as a no. Your answer is remembered on your device for six months, then we ask again.
Outside services
Your browser contacts these directly: the fonts on every page, the others only when you use the feature. Each receives your IP address and the usual details of a web request (browser, time and the site asking), and each is run by others under their own privacy policies.
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) serves the typefaces.
- Photon, run by komoot (photon.komoot.io), answers place search. It receives what you type in the search box, and your browser's language if it's English, French or German. When you use your location, or drag the map away from the place you chose, it receives the coordinates of the centre, to look up a place name.
- The Overpass API supplies roads, paths, buildings, rail and water from OpenStreetMap: overpass-api.de, run by FOSSGIS, or maps.mail.ru, run by VK, when the first is busy or can't be reached. It receives the corner coordinates of the area you chose and which kinds of features to include.
- OpenStreetMap's tile servers (tile.openstreetmap.org), run by the OpenStreetMap Foundation, show the background map while you pick an area, so they learn which part of the world you're looking at.
- Mapzen Terrain Tiles on Amazon Web Services (s3.amazonaws.com) supply elevation for contour lines and ridgelines. They receive requests for the tiles that cover your area.
Your location is used only when you ask for it, and your browser asks your permission first. The map centres on it, and the services above then see that area as they would any place you choose. If you draw that area, the drawing and its link carry its coordinates.
Children
Plotcaster is a general creative tool for people aged 13 and over, as the terms say. It has no accounts and doesn't knowingly collect personal information from anyone, including children under 13.
Your rights
We have no accounts and no visitor database, so apart from the hosting logs and page counts above there is nothing about you for us to access, correct or delete. Where Google Analytics runs because you said yes, your agreement is the legal basis, and you can withdraw it at any time with Cookie settings; that is as easy as giving it. What Plotcaster stores stays in your browser, where you can delete it. If you think we do hold something about you, write to us and we'll look into it. For the hosting, page-count and outside services, you can also contact those providers directly.
Changes
If this policy changes, the effective date at the top changes with it, and material changes are noted here.
7 October 2026: the search box is now on every page and looks through the whole site, not only the free SVG library. Added how it works, and that Google Analytics, where it runs, records the words searched for from any page and how many results they found.
5 October 2026: added that the shadow box maker keeps a scene you have changed in your browser, and that Google Analytics records which file tool is used and the kind of file it saves.
3 October 2026: added Google Analytics on the pages outside the editor, its cookies, the question asked in Europe, the UK and Switzerland before it loads, and Cookie settings; what a link made by the shadow box scene maker holds; and that Google Analytics, where it runs, records library searches, downloads and scene maker choices.
12 September 2026: added Cloudflare's reports of failed connections and the speed scores its page counts send, what removing a drawing deletes and when, what a link carries, how long hosting logs are kept, the minimum age, and our company details.
11 September 2026: named every outside service and what it receives, including Cloudflare, image links and place-name lookups; added page counts with Vercel Web Analytics and Cloudflare Web Analytics; the Draw style's runtime is now served from this site.
Contact
Click Clack Labs LLC · 418 Broadway, Ste R, Albany, NY 12207 · [email protected]